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Input a message M needing signature 
and a private key a. 


^ 


r 


Calculate hash value y=h(M) of (M). 




r 


Genetate a braid b randomly belonging to 
SetRB n-l-m by using arithmetic PBG 




r 


Calculate byb"* 




r 


Calculate sign(M)= a''byb"'a 







Output the last sign(M) as the Signature of M. 



Fig.l 
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Decide distance d between the braid 
group public key pairs of system 

1 

Generate a braid element x randomly belonging to set LBm{/>, 

X=A"7l|7r2...7tl 



I 

Generate a braid 
b belonging to set Bn(5/) 



Calculate x -b'^-lxb, a=b 



Generate a bit randomly 




< 1 




x'=decycling(x'), a=a7t| 




x-cycling(x'), 
a= aT"(7Ci) 











'-Vvhether y belongs^ 
» set sss(x) 





Y 



(x,x') is public key, a is private key 



Fig.2 
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Inputm essage bit 
sequence M 




r 


Selecta n ordinary hash 
function H whose output is 
R, length is l[Iog(2.n!)]. 


y 




Divide the hash result into 
1 sections R1||R2||...||R1 
equally 






i=0 
h(M)=e 




f 


Transform RJ into a 
permutation Ai * 
correspondingly 






i=i+l 
h(M)-h(M)Ai 


<^ i= 


f 

=\ 


Output h(M) 


Fig.3 
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Input signature sign(m) and 
message m needing verification 




r 


Input public key (x,x') 




r 


calculate the hash value 
y=h (m) of m 




r 


Determine : 
using arithn 


sign (m) by 
letic BCDA 



output the failure of 
signature verification 



X 

Y 



calculate xy,x' sign(m) 



± 



decide xy, x'sign(m) 

by using arithmetic BCDA 




t 

output the success of 
signature verification 



Fig 4 
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input two braids a, b needing 
determining, and decide prime 
number p and positive integer i 



calculate its character 
Pa (t) and Pb(t) 



i=0 



generate an mteger tt 
ofZ/PZ randomly 



calculate Pa(ti) and Pb(ti) 
i= i+1 




calculate Maxinf(a) 
and Maxinf][b) 




axinfl[a)=Maxinfi 





r 


calculate Minsup(a) 
and Minsup(b) 


"^^linsup(a 


r 

)=MiriSiip(^ 


judge a-b is tenable 



judge a~b is 
untenable 



Fig 5 
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generate braids 
randomly 



message M 



hash function h 



signatory S sign 
the message 



generate key 





verifying party 


< 


► 


verifies the signature 





Fig 6 



